Brian Honan from BH Consulting explains how small businesses can prepare for  the possible event of a security incident.

Understanding your company

Is your business going to be involved in sponsorship or promoting certain events?

“If your organisation is supporting an event, a company or a political message during the Olympics, then you’re potentially raising the threat to your organisation by activists.  Being aware of this can help you prepare for such an attack if it happens.”

Open source intelligence

Is your company being perceived negatively in any way?

“Rather than sit and watch the headlines to discover any negative news about your company, monitor the Internet and social network sites like Twitter or Facebook to find out if there is any particular talk going on about your organisation.”

Informing your staff

Are your staff aware of online threats?

“Terrorists are going to be using the Olympics as an opportunity to target people.  They’ll be looking to phish people’s banking details, email scams targeted at selling cheap tickets, and using email or social media sites to circulate fake videos or news releases that could be containing malware.  Make staff aware that they can be targeted by this.  Inevitably they’re probably going to be using your corporate equipment to browse the internet or open emails.”

Identify the tools you need

Have you got the forensic software needed to manage an incident?

“Look at the tools and equipment you’re going to need to manage the incident.  You need to be able to use the tools and have a tracking system in place.  Think about how you’re going to be able to investigate incidents remotely if people are working from home.”

External relationships

Do you need to contact external sources to provide forensic services?

“If your organisation is not big enough to have the in-house knowledge needed, you should look at contacting external providers to support your company in the event of an incident.  It’s better to negotiate those prices now, when you have more bargaining room, than in the middle of an incident.”

Your own team

Are you providing a conducive working environment in the event of an incident?

“It’s important that you don’t forget your own team members.  It’s going to be stressful enough for a lot of people to get work during the Olympics because of transport disruption.  During a security incident, that stress for your team workers can rise quickly.  Make sure you provide refreshments and rest periods.  Communicate regularly with your team and look at using social networks to get that message out.”